~ / search / GHSA-p6m6-9j36-vfjx

GHSA-p6m6-9j36-vfjx

glazedlists XML Deserialization vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-31890

Packages

EcosystemPackageAffectedFixed in
Maven com.glazedlists:glazedlists 1.11.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.

References

External links from the advisory. They lead to third-party sites.